Red Hat Security AdvisoryRHSA-2008:0263
Red Hat Network Proxy Server security update
Released 2008-05-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Satellite Proxy v 5.0 (RHEL v.4 AS) jabberd-2.0s10-3.38.rhn.i386, rhn-apache-1.3.27-36.rhn.rhel4.i386, rhn-modperl-1.29-16.rhel4.i386
Fixes 6 records
Priority MEDIUM 59
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to in…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.75891 · Published 2008-01-08 · Fixed CWE-79
Priority MEDIUM 50
Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.46603 · Published 2007-12-13 · Partial fix CWE-79
Priority MEDIUM 43
Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.27783 · Published 2007-06-27 · Fixed
Priority LOW 35
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resourc…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10425 · Published 2007-03-30 · Fixed CWE-20
Priority LOW 28
Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is se…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.03298 · Published 2007-06-20 · Fixed
Priority LOW 28
The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") by sending a "response stanza before an auth stanza".
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02893 · Published 2006-03-21 · Fixed